The problem is with openssh-server-2.9p1-3gss and 2.9p2. To reproduce the bug: * open an ssh2 session (e.g: ssh -l guest localhost) * send SIGTERM to the xterm holding this session * type "who" on the server and notice that the client pts/ is still there So the ssh server improperly cleans /var/run/utmp. The problem is that, it can completly messes up the logs on the system. Also note, that if you quit the session with ALT-D, everything works fine.
This is fixed in openssh cvs.
Now, fixed in openssh-3.0p1-1.